$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/e7afb843-f085-3588-909c-5f913275b459.roa File: e7afb843-f085-3588-909c-5f913275b459.roa (raw, json) Hash identifier: 2giMiT7HS6fYdPkME1kVD9DXexnd0R5mO7JLekUQ78A= Subject key identifier: 60:E2:CC:07:89:27:7B:B9:90:6C:89:8A:88:8D:EC:7F:D1:3C:29:3C Certificate issuer: /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc Certificate serial: 010D0C9F4328584F4112B0E6516D42716E7A5B80 Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/e7afb843-f085-3588-909c-5f913275b459.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 53454 IP address blocks: 192.223.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b0:e6:51:6d:42:71:6e:7a:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=3b7fe7aa-89ab-4cc3-b65f-d350d97df8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:bf:21:06:95:bb:42:ca:2c:94:b5:dc:9a: 3e:97:68:24:92:f5:30:56:44:8b:59:6f:83:27:be: 86:89:5e:97:31:71:3b:ce:73:11:a8:66:09:dd:a8: 48:78:0e:88:1b:be:ba:12:b8:45:5e:23:d8:01:66: d4:0f:93:c6:1b:c0:8c:30:ce:fe:33:56:65:1d:1e: 49:98:34:46:ed:61:b2:21:83:c7:14:0e:bd:fd:7f: 86:a4:5c:8a:e5:3c:48:91:40:56:f3:1c:81:7b:bb: e8:e7:bf:ae:6f:30:aa:3f:fa:c7:2d:4f:73:90:f5: 05:95:d5:26:49:88:ec:a0:8f:a5:c1:cf:15:37:ac: 30:73:20:b5:dd:33:7f:84:f2:12:d2:dd:16:7f:a1: ce:4a:fa:83:3a:09:88:ea:c0:9e:b5:91:27:0b:57: e5:aa:13:cf:42:eb:63:b1:dd:74:60:f7:3e:b3:af: 58:19:c5:ea:17:60:78:18:f1:50:ec:0b:5f:db:05: 43:de:b0:a2:9e:c0:c1:e9:9f:f4:1d:03:8d:53:15: 90:b2:29:6d:fc:69:7b:29:bb:ff:16:8d:30:d2:7c: cc:7c:09:67:e4:1d:49:a9:32:d5:e6:9d:f2:52:be: f4:f7:c4:13:54:a4:ff:8f:1c:3c:34:09:96:bb:40: f2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E2:CC:07:89:27:7B:B9:90:6C:89:8A:88:8D:EC:7F:D1:3C:29:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/e7afb843-f085-3588-909c-5f913275b459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl X509v3 Authority Key Identifier: keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer sbgp-ipAddrBlock: critical IPv4: 192.223.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2a:ff:f5:fb:33:ab:4c:01:3c:3b:62:64:0a:e0:f0:d0:c2: b5:20:4c:55:88:df:a0:4f:3b:80:90:91:93:1d:44:4f:ce:1a: 5d:0e:c9:c9:23:53:16:dd:38:c4:4d:e0:ee:80:42:16:f5:3f: 09:77:8c:2b:83:6a:27:29:1e:31:03:02:28:ec:f3:8b:c6:fe: ae:4c:7e:2c:24:3a:ca:58:e4:51:f5:07:cb:42:29:63:c5:85: d2:06:63:bc:48:aa:ba:99:2f:99:92:de:9f:23:71:d8:7e:47: 6f:09:58:41:30:07:fc:58:d6:4b:12:ca:fa:ce:f5:26:db:2b: 2b:e4:47:db:be:0e:7f:a7:ab:60:4d:cf:24:ed:dd:2d:9b:e6: 7c:64:28:ec:b5:f5:63:05:39:2e:63:1f:93:db:fb:79:60:76: 4b:80:18:ec:03:ff:c1:f8:f1:c7:9b:b3:0a:7f:3e:98:a7:76: 1c:90:2c:cb:6b:38:15:57:ef:89:3a:0c:ea:58:a8:ae:f4:49: 9f:b1:f3:d2:06:0f:73:24:e6:db:fd:b9:7d:e5:2a:94:69:e9: 80:c0:79:9e:34:a4:23:63:7e:37:b0:04:60:04:9b:07:2a:a4: 7e:84:94:dd:4a:1f:c4:8d:00:33:9a:8c:c1:2d:7c:cd:c5:c4: a0:77:35:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErDmUW1CcW56W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmMGMwNDItY2YzNi00ZDZmLTk1NGEtYmVlNjFhNWIz ZGNjMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk M2I3ZmU3YWEtODlhYi00Y2MzLWI2NWYtZDM1MGQ5N2RmOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu6/IQaVu0LKLJS13Jo+l2gkkvUwVkSLWW+D J76GiV6XMXE7znMRqGYJ3ahIeA6IG766ErhFXiPYAWbUD5PGG8CMMM7+M1ZlHR5J mDRG7WGyIYPHFA69/X+GpFyK5TxIkUBW8xyBe7vo57+ubzCqP/rHLU9zkPUFldUm SYjsoI+lwc8VN6wwcyC13TN/hPIS0t0Wf6HOSvqDOgmI6sCetZEnC1flqhPPQutj sd10YPc+s69YGcXqF2B4GPFQ7Atf2wVD3rCinsDB6Z/0HQONUxWQsilt/Gl7Kbv/ Fo0w0nzMfAln5B1JqTLV5p3yUr7098QTVKT/jxw8NAmWu0DySwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDizAeJJ3u5kGyJioiN7H/RPCk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZmYw YzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2MWE1YjNkY2MvZTdhZmI4NDMtZjA4NS0z NTg4LTkwOWMtNWY5MTMyNzViNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWZmMGMwNDItY2YzNi00ZDZmLTk1 NGEtYmVlNjFhNWIzZGNjL2FmZjBjMDQyLWNmMzYtNGQ2Zi05NTRhLWJlZTYxYTVi M2RjYy5jcmwwHwYDVR0jBBgwFoAUYMltwESmb70vbssD6msX/LpsLokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZmYwYzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2 MWE1YjNkY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwN8JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwq//X7M6tMATw7YmQK4PDQwrUgTFWI36BPO4CQkZMdRE/OGl0Oyckj UxbdOMRN4O6AQhb1Pwl3jCuDaicpHjEDAijs84vG/q5MfiwkOspY5FH1B8tCKWPF hdIGY7xIqrqZL5mS3p8jcdh+R28JWEEwB/xY1ksSyvrO9SbbKyvkR9u+Dn+nq2BN zyTt3S2b5nxkKOy19WMFOS5jH5Pb+3lgdkuAGOwD/8H48cebswp/PpindhyQLMtr OBVX74k6DOpYqK70SZ+x89IGD3Mk5tv9uX3lKpRp6YDAeZ40pCNjfjewBGAEmwcq pH6ElN1KH8SNADOajMEtfM3FxKB3NYc= -----END CERTIFICATE-----Generated at Sun Oct 4 22:48:30 2026 by rpki-client